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See TICOM/l - 51,52 and SIR 1704 for earlier reports 
on HERzPELD. 

From July 1943 till the beginning of November 1 ^ 
PW worked in the Italian Referat of In/7/6. He ^ transferred 
there after ITALY had gone over to the Allies. A F ^ e ' bef ?^ 
had been issued stopping work on Italian ciphers in 1942. inio 
work was now to be resumed. There was only a oadre Referat 
left when PW entered it. This consisted of Ref eratsleiter 
Uffa. MANAIGO and a small number of UnteroffizieE and Stabshelf erinnen 
PW was set to work on some 400 messages whioh had been 
intercepted in May, June and July. While this material was 
being statisticised by the Hollerith-Abteilung, FW worked on 
it at the Mathematiker-Refterat together with Uffz. Dr. RINOW 
and Gcf r. Regie rungs rat WUNSCHE. The material consisted 
of 5Z (5 figure) messages of considerable length. In the 
course of August it was found out that the first and last 
group of each message was probably an indicator group* 
Very few repeats were found in the statistics obtained from 
Hollerith. In the beginning of September 1943 an Italian 
rccD.phering table and a number of messages from the cipher 
office of the Italian Commandantura at ATHENS arrived in 
BERLIN. They had been taken by some German officers under 
dramatic oiroumstanoes. When the news that MUSSOLINI had 
been arrested and that the Italian government had concluded 
'an armistice, was reoeived at German Headquarters ^n .ATHENS, 
two lieutenants of Kommandeur der Nachriohtenauf klarung. 4 
at NEA PHALIRON drove to the commandantura in ODOS AMERIKIS 
in ATHENS, walked into the cipher office and started 
collecting the material lying on the tables in the office and 
packing it into a oase in front of the bewildered cipher 
personnel. They were in the middle of doing so when a number 
of Italian officers came in and began shouting rather excitedly. 
After some controversy the Germans thought it preferable to 
disappear quietly since the attitude of the Italians became 
too threatening. They did however carry with them what they 
had collected from the tables and sent it on to BERLIN where 
FW was charged with trying to find out what it was worth. 

The Reoiphering table oontained on its cover a note saying 
that it v-as to be used in connection with the code ELLADE and 
that the fact, that ELLADE oode and reoiphering had been used, 
was to be made dear by using certain 3-figure groups to indioal© 
. the use of this particular cipher. These 3-figure groups were 
given on the cover of the Reoipiiering blook. There were 
about a dozen or a few more. Suppose they were: 

076,095,122,187,234,335,545,577,678,777,829,867. 

It was later found out from cipher material captured 
in Northern ITALY, that another code PIAVE and another reoiphering 
table (or blook) were in use in that district and that another 
set of some fifteen 3-figure groups like 

008,029,255,267, a.s.o. 

was used to indicate, that the ciphor FIAVE -was contained in that 
particular message. 
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V Cipher Reference Group 

PW soon found out that about 200 messages of a certain 
group of traffios in the BALKAN areas and the DODECANESE 
Islands always contained the 3-figure reference groups 
in the first, second and third figure of the first and of 
the Inst 5-figure group of eaoh message* Thus one particular 
message may have begun with 

67845 -and ended with 23478. 

2 ) deciphering Blook With Indicator Groups 

PW then inspected the reoiphering table. It was in the 
form of a block, containing about 60 sheets. On some sheets 
figures had been written running from 8 to about 15. It 
was not difficult to guess that these were the date of the 
day on which that particular sheet of the table was to be 
used. The sheet was torn off the blook and either destroyed 
or kept for some time for control purposes. Thus sheets bearing the 
written figures 1 to 7 had been torn off and were missing. 
Either the 7th or the 8th of August was therefore the date 
on which the German lieutenants had captured the blook. Each 
page or sheet ( as far as I remember one page of every sheet 
was printed) containedlOCO 5-figure groups. On the top 
margin there were four lines of 2-figure groups, eaoh line 
having ten such groups, so arranged as to have four different 
numbers to indicate each of the ten columns containing 100 
of the 1000 5-figure groups. On the margin on the left 
there were four columns of 3-figure groups each oolumn containing 
100 numbers thus having four different numbers to indicate 
a certain line in the table. Thus every single 5-figure group 
out of the 1000 groups could be defined in the table Tiy giving 
one of the four numbers on the top margin and one of the four 
numbers from the side margin indicating the line that 
contained the 5-figure group in question. The two numbers 
could be combined with eaoh other to form a 5-figure group* 
This Indicator Group was "camouflaged" in the second and 
last but one group of the message. 

3) Reoiphering of Indicator Grou^_ 

PW soon found out that a small table containing 100 
5-figure groups was used to reoipher the indicator group. 
This assumption of PW was later confirmed when a TABELLINA was 
found to serve for "camouflaging" the indicator groups by adding 
to them a "camouflage group" (Tamgruppe) , which was taken from 
this TABELLINA. The latter was to be used in connection with 
the PIAVE code discovered in Northern ITALY. The TABELLINA 
of the ELLADE code was not seised but PW was able to reconstruct 
it fro© the messages by assuming one Tamgruppe to be OXOT. 
A 2-figure reference group was used to point out to the decipherer 
which Tamgruppe had been used. This "camouflage indicating 
group" (Tarnweiser) was oombined with the oipher reference group 
to form the 5-figure group at the beginning and at the end of the 
message. Thus the groups given in the example under heading 
1) are containing the Tarnweiser 45 and 78. The sums obtained 
by adding the respective Tarngruppen indicated by Tarnweiser 45 
and 78 to the indicator group (for instance 78652) may be 83421 
and O56O8. 
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These groups would then appear in the second and in the last 
but one group of the message, which would then begin and end 
with the following groups': 

67845 83421 09608 23478 

When assuming that the Tarngruppe indicated by 
Tarnweiser 45 is C0000, and after subtracting this group from 
83421 the latter is obviously the wanted indicator group. 
*hen this indicator group is subtracted from 09608, the Tarngruppe 
belonging to Tarnweiser 78 is obtained. It is 

09608 - 83421 =r 26287. 

In this way PW constructed the TABELLINA of the ELADE 

code . 

In the end of September 1943 FW obtained a fairly large 
amount of cipher material captured in Northern ITALY consisting 
of the PIAVE code, a reoiphering table and a Tabellina as well 
as many messages. Work on this material was of course no 
crypto- analysis but simple decipherment. PW did however 
assume that since the PIAVE code was a 4-figure code having 
20,000 positions (each 4-figure group having two meanings), 
the ELLADE code would be made up in the same way. Work on 
this code was interrupted when In 7/6 moved from BERLIN to 
JUTERBOG in the middle of October 1943. FW resumed his work 
there, but in November 1943 Major LECHNER decided to dissolve 
the It alian R eferat. a decision justified by the fact that 
after the fall of LEROS no more Italian wireless messages 
could be intercepted. I t wa s believed that the Allies ha< 
prohibited further Italian wireless transmissions. PW 
was then transferred to the BALKAN Referat, the other members 
of the Referat to the French Referat and Uffz. MANAIGO, Uffz, 
KRATOOHVIL and Sdf. G BILDT were transferred to the Agenten 
Referat of Oberleutnant VAUOK. 

Example of Sheet from a Reoiphering Blook. 

00 03 Off C7 09 11 1$ i5 18 22 
49 47 46 45 41 37 33 29 28 26 

§§ l\ J 6 58 6 3 65 66 67 72 73 

98 96 94 93 91 88 85 83 79 76 

001 498 500 997 46356 39806 65575 86487 45562 89556 42754 64806 65477 09768 

003 497 504 995 20081 72915 09010 50829 24110 60513 26132 20601 18730 50316 

005 495 506 993 06072 63384 51669 78274 49367 65478 27548 49026 18593 37561 

248 254*743 751 21883 69450 89474 20011 12068*57427 96130 90302 941 74 63756 

249 252 749 750 63267 57291 88375 35901 43710 46382 44589 48929 76859 00153 



1) Croatian State Ciphers 

The Croat Army (Domobrani) and Ustas'a were using a 5-figure code 
which was based on the former Yugoslav military code/Furthermore 
they used the German X-maohine of the "Enigma" type. As far as 
PW knows there was no actual crypto-analytical work done in the 

Croat section of the BALKAN Referat bnf moa+i,, u • \ ^ , 

TOlfc i*vuivfu* rwizr&z Dut mostly deciphering and control 



2) Hungarian Ciphers 



Count ESZTERHAZY had 
1 code and a turning t 
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(Drehraster) some time before PW entered the Balkan Referat. 
In the Autumn of 1%4 PW remembers to have seen a number of 
Hungarian messages worked on by Uffz. TEUCHTLER and SEPER 
which he believes were enciphered by some sort of 2-figure 
substitution key of a somewhat more complicated type, 

3) Rumanian Ciphers. 

PW knows that Wachtmeister KARL SCHMIDT and Uffz. WAGNER 
have been working on a Rumanian diplomatic oode consisting 
of 5-figure (or 6-figure?) groups, 

4) Bulgarian Ciphers . 

PW remembers that Uffz. THIELE worked on Bulgarian 
ciphers. PW has not seen his work and has therefore no 
knowledge of the type of cipher in question. 

5) Turkish and Greek Ciphers. 

All details known to PW have been mentioned in his 
report on his work at In 7/6 and on GREECE. 



